@mcp-b/chrome-devtools-mcp 1.6.3 → 1.7.0

package/build/src/McpContext.js

@@ -916,7 +916,8 @@ export class McpContext {
         try {
             const dir = await fs.mkdtemp(path.join(os.tmpdir(), 'chrome-devtools-mcp-'));
             const filename = path.join(dir, `screenshot.${getExtensionFromMimeType(mimeType)}`);
-            await fs.writeFile(filename, data);
+            // Use mode 0o600 (owner read/write only) for secure temp file creation
+            await fs.writeFile(filename, data, { mode: 0o600 });
             return { filename };
         }
         catch (err) {
@@ -927,7 +928,8 @@ export class McpContext {
     async saveFile(data, filename) {
         try {
             const filePath = path.resolve(filename);
-            await fs.writeFile(filePath, data);
+            // Use mode 0o644 (owner read/write, others read) for user-specified paths
+            await fs.writeFile(filePath, data, { mode: 0o644 });
             return { filename };
         }
         catch (err) {

package/build/src/cli.js

@@ -170,10 +170,11 @@ export function parseArguments(version, argv = process.argv) {
         .check(args => {
         // We can't set default in the options else
         // Yargs will complain
-        if (!args.channel &&
-            !args.browserUrl &&
-            !args.wsEndpoint &&
-            !args.executablePath) {
+        // Note: Use explicit undefined checks since empty strings are valid falsy values
+        if (args.channel === undefined &&
+            args.browserUrl === undefined &&
+            args.wsEndpoint === undefined &&
+            args.executablePath === undefined) {
             args.channel = 'dev';
         }
         return true;

package/build/src/third_party/index.js

@@ -11,6 +11,6 @@ export { default as debug } from 'debug';
 export { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 export { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 export { SetLevelRequestSchema, ToolListChangedNotificationSchema, } from '@modelcontextprotocol/sdk/types.js';
-export { z as zod } from 'zod/v4';
+export { z as zod } from 'zod';
 export { Locator, PredefinedNetworkConditions, CDPSessionEvent, } from 'puppeteer-core';
 export { default as puppeteer } from 'puppeteer-core';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-b/chrome-devtools-mcp",
-  "version": "1.6.3",
+  "version": "1.7.0",
   "description": "MCP server for Chrome DevTools with WebMCP integration for connecting to website MCP tools",
   "keywords": [
     "mcp",
@@ -48,29 +48,29 @@
     "!*.tsbuildinfo"
   ],
   "dependencies": {
-    "@composio/json-schema-to-zod": "^0.1.17",
-    "@modelcontextprotocol/sdk": "1.24.3",
+    "@composio/json-schema-to-zod": "^0.1.19",
+    "@modelcontextprotocol/sdk": "1.25.2",
     "core-js": "3.47.0",
     "debug": "4.4.3",
-    "esbuild": "^0.24.2",
+    "esbuild": "^0.27.2",
     "puppeteer": "24.32.0",
     "puppeteer-core": "24.32.0",
     "yargs": "18.0.0",
-    "zod": "4.3.5"
+    "zod": "3.25.76"
   },
   "devDependencies": {
     "@eslint/js": "^9.35.0",
-    "@modelcontextprotocol/sdk": "1.24.3",
+    "@modelcontextprotocol/sdk": "1.25.2",
     "@rollup/plugin-commonjs": "^29.0.0",
     "@rollup/plugin-json": "^6.1.0",
     "@rollup/plugin-node-resolve": "^16.0.3",
-    "@stylistic/eslint-plugin": "^5.4.0",
+    "@stylistic/eslint-plugin": "^5.7.1",
     "@types/debug": "^4.1.12",
     "@types/filesystem": "^0.0.36",
     "@types/node": "^24.3.3",
     "@types/sinon": "^21.0.0",
     "@types/yargs": "^17.0.33",
-    "@typescript-eslint/eslint-plugin": "^8.43.0",
+    "@typescript-eslint/eslint-plugin": "^8.53.1",
     "@typescript-eslint/parser": "^8.43.0",
     "chrome-devtools-frontend": "1.0.1550444",
     "core-js": "3.47.0",
@@ -79,17 +79,17 @@
     "eslint-import-resolver-typescript": "^4.4.4",
     "eslint-plugin-import": "^2.32.0",
     "globals": "^16.4.0",
-    "prettier": "^3.6.2",
+    "prettier": "^3.8.1",
     "puppeteer": "24.32.0",
     "puppeteer-core": "24.32.0",
     "rollup": "4.53.3",
     "rollup-plugin-cleanup": "^3.2.1",
     "rollup-plugin-license": "^3.6.0",
-    "sinon": "^21.0.0",
+    "sinon": "^21.0.1",
     "typescript": "^5.9.2",
-    "typescript-eslint": "^8.43.0",
+    "typescript-eslint": "^8.53.1",
     "yargs": "18.0.0",
-    "zod": "4.3.5"
+    "zod": "3.25.76"
   },
   "engines": {
     "node": "^20.19.0 || ^22.12.0 || >=23"
@@ -103,7 +103,7 @@
     "mcpName": "io.github.ChromeDevTools/chrome-devtools-mcp"
   },
   "scripts": {
-    "build": "tsc && node --experimental-strip-types --no-warnings=ExperimentalWarning scripts/post-build.ts",
+    "build": "rm -rf build/vendor build/node_modules build/tsconfig.tsbuildinfo && tsc && node --experimental-strip-types --no-warnings=ExperimentalWarning scripts/post-build.ts",
     "bundle": "npm run clean && npm run build && rollup -c rollup.config.mjs",
     "check-format": "eslint --cache . && prettier --check --cache .;",
     "clean": "node -e \"require('fs').rmSync('build', {recursive: true, force: true})\"",